216076 matches found
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-67854
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...
CVE-2026-50776
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...
PT-2026-73271
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
EUVD-2026-60353
An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file...
PT-2026-76785
Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.41.3 Description An authenticated published-app user with the BASIC role can provide attacker-controlled bucket and key values to the 'POST /api/attachments/:datasourceId/url' endpoint. This allows the user to obta...
PT-2026-73335
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...
EUVD-2026-60449
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
PT-2026-73266
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-73276
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-73269
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-73277
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-51346
SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...
PT-2026-76874
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.2.2.0 Description The application fails to redact the pre-auth secret during the generation of a diagnostics report. A local attacker with access to the user's log files or diagnostics report can obta...
.NET: .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-74789
Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...
EUVD-2026-59955
Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...
